Skip to content

docs: sync the Guide with the certificate pinning findings (Dart and Kotlin) - #25

Merged
dwikiriyadi merged 2 commits into
mainfrom
docs/s3-dart-pinning
Oct 12, 2026
Merged

dwikiriyadi merged 2 commits into
mainfrom
docs/s3-dart-pinning

Conversation

@dwikiriyadi

@dwikiriyadi dwikiriyadi commented Oct 12, 2026 •

Copy link
Copy Markdown
Member

Regenerated from the vault after srctool/sinew-dart#61 and srctool/sinew-kotlin#64.

Base Network

  • Certificate pinning is part of the network package on both platforms: checked at the handshake, a failure reported, and ignored in the browser.
  • Pin a backup.
  • A pinning failure is never "offline", even behind another route's connection error.

Flutter Network

  • pinCertificateAuthorities on the IO adapter, and a no-op on the web.
  • Tested against real servers: the public-site check, and Apple's certificate requirements.

Kotlin Network

  • SinewConfig.certificatePins applied on OkHttp and Darwin; an engine that can't pin throws.
  • The dual-stack bug, where a pinning failure suppressed behind a refused connection was classified as offline.
  • The iOS test runner's TLS limits.
  • Tests of a guarded failure return the call's status rather than throwing unreachable.

🤖 Generated with Claude Code

dwikiriyadi and others added 2 commits October 12, 2026 14:31
pinCertificateAuthorities on the IO adapter, a no-op on the web, and how
it's tested against real servers, including the public-site check and
Apple's certificate requirements.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Kotlin's SinewConfig.certificatePins on OkHttp and Darwin, the dual-stack
pinning failure that hid behind a suppressed exception, the iOS test
limits, and tests of a guarded failure returning the call's status.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@dwikiriyadi dwikiriyadi changed the title docs: sync the Guide with the Dart S3 certificate pinning findings docs: sync the Guide with the certificate pinning findings (Dart and Kotlin) Oct 12, 2026
@dwikiriyadi
dwikiriyadi merged commit db44ca4 into main Oct 12, 2026
4 checks passed
@dwikiriyadi
dwikiriyadi deleted the docs/s3-dart-pinning branch October 12, 2026 07:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant